INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO THE EU REGULATION 2016/679 ("GDPR")

DATA CONTROLLER

Bloomest SRL
Via Sandro Penna, 110 - Zona Ind.
Sant’Andrea delle Fratte - 06132 Perugia (PG)
t. +39 075 52 79 943, privacy@lavapiù.com
("Company")

	PERSONAL DATA PROCESSING
	Contact name and surname, fiscal code/VAT number, company name, registered office address, email and telephone contacts, further data obtained by using the app (such as information relating to single machines, information relating to end customers, web management and end customers' mobile app) and additional information necessary for the execution of the agreement.

	PURPOSE OF PROCESSING		LEGAL BASIS OF PROCESSING		DATA RETENTION PERIOD AND PLACE OF RETENTION
Purposes related to the establishment and execution of the contractual relationship between you and the Company.		Execution of an contract/assignment of which you are a part.		Contract period and, after termination, for 24 months. In the event of a legal dispute, for the entire duration of the same,until the exhaustion of the terms of practicability of the appeals. The place of retention of the data is the Italian Republic
Comply with obligations under regulations and applicable national and supranational legislation.		Need to fulfil legal obligations
If necessary, to ascertain, exercise or defend the rights of the Data Controller in court		Legitimate interest
Extra-judicial credit recovery		Legitimate interest
Marketing purposes: for example, sending with automated contact methods (such as sms, mms and e-mails, push notifications) as well as traditional ones (such as telephone calls and traditional mail) - promotional and commercial communications relating to services/products offered by the Company or notification of company events, as well as performance of market research and statistical analyses		Consent (optional and revocable at any time).		Until consent is withdrawn; For the entire duration of the contractual relationship or until the request to unsubscribe from the newsletter is made The place of retention of the data is the Italian Republic
Once the aforementioned retention period has elapsed, the Data will be destroyed, deleted or anonymised, subject to the technical cancellation and backup procedures.

	MANDATORY PROVISION OF DATA
	The provision of data is mandatory for the conclusion of the contract/assignment, therefore the failed, partial or incorrect provision of such Data makes the conclusion of the same impossible.

RECIPIENTS OF THE DATA

The data can be processed by external subjects operating as data controllers such as, for example:

a. Supervisory and control authorities and bodies;

The data may also be processed, on behalf of the Company, by external subjects designated as managers, who are given adequate operating instructions. These subjects are essentially included in the following categories:

a. companies offering e-mail sending services;
b. companies offering website maintenance services;
c. enginko s.r.l. for the management and processing of data for the purpose of transferring aggregate statistical data;
d. The parent company of Lava Più s.r.l., which could use the data for statistical management of aggregate data.

	SUBJECTS AUTHORISED TO PROCESSING
	The data may be processed by the employees and collaborators of the corporate functions assigned to pursue the aforementioned purposes, who have been expressly authorised to process and who have received adequate operating instructions.

RIGHTS OF THE DATA SUBJECT - RIGHT O LODGE COMPLAINTS TO THE SUPERVISORY AUTHORITY

By contacting the Company via e-mail at privacy@lavapiù.com, the data subjects can ask the data controller to access the data concerning them, to delete them, to correct of inaccurate data, to integrate incomplete data, to limit the treatment in the cases envisaged in art. 18 GDPR, as well as oppose to the processing in the hypothesis of legitimate interest of the data controller. As far as newsletters are concerned, the data subject can change his/her preferences or unsubscribe from the same by clicking on the button at the bottom of the email, called "unsubscribe".

Furthermore, in the event that the processing is based on consent or on the contract and is performed on automated devices, the data subjects have the right to receive the data in a structured, commonly used format which can be read from a device and, if technically feasible, to transmit it to another controller without impediments.

Data subjects have the right to withdraw the consent given at any time for marketing and/or profiling purposes, as well as to oppose the processing of data for marketing purposes, including profiling connected to direct marketing. The data subject who prefers to be contacted for the aforementioned purpose exclusively through traditional methods, has the possibility to express his/her opposition only following the receipt of communications through automated methods.

Data subjects are entitled to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work or in the State in which the alleged violation occurred.